Skip to content

II - Mission Support Classified

Rules and Groups employed by this XCCDF Profile

  • SRG-APP-000033-CTR-000090

    Group
  • The Kubernetes kubelet staticPodPath must not enable static pods.

    Allowing kubelet to set a staticPodPath gives containers with root access permissions to traverse the hosting filesystem. The danger comes when the container can create a manifest file within the /...
    Rule High Severity
  • SRG-APP-000033-CTR-000100

    Group
  • Kubernetes DynamicAuditing must not be enabled.

    Protecting the audit data from change or deletion is important when an attack occurs. One way an attacker can cover their tracks is to change or delete audit records. This will either make the atta...
    Rule Medium Severity
  • SRG-APP-000033-CTR-000095

    Group

The content of the drawer really is up to you. It could have form fields, definition lists, text lists, labels, charts, progress bars, etc. Spacing recommendation is 24px margins. You can put tabs in here, and can also make the drawer scrollable.

Capacity
Modules